BIND 9.10.0a1 Release Notes
- Updated on 25 Nov 2013
- 3 minutes to read
BIND 9.10.0a1 is the first alpha development release of BIND 9.10, a new branch of BIND 9.
BIND 9.10 includes a number of changes from BIND 9.9 and earlier releases. New features include:
- DNS Response-rate limiting (DNS RRL) blunts the impact of reflection and amplification attacks by rate-limiting substantially-identical responses.
- New "map" zone format for faster loading. The new zone file format "map" is an image of a zone database that can be loaded directly into memory, allowing much faster zone loading.
- RPZ performance improvements. Up to 32 response-policy zones can be configured with minimal performance loss.
- New RPZ client-IP triggers and drop policies (RPZ2). RPZ responses can be configured on the basis of the client IP address; this can be used, for example, to blacklist misbehaving recursive or stub resolvers.
- ACLs can now be specified based on geographic location using the MaxMind GeoIP databases.
- Support for setting Differentiated Services Code Point (DSCP) values in 'named' if supported by the underlying OS. DSCP is used for prioritizing outbound traffic.
- Multiple DLZ databases can now be configured. Individual zones can be configured to be served from a specific DLZ database. DLZ databases now serve zones of type "master" and "redirect".
- New XML schema (version 3) for the statistics channel includes many new statistics and uses a flattened XML tree for faster parsing.
- The statistics channel can now provide data in JSON format as well as XML.
- The internal and export versions of the BIND libraries (libisc, libdns, etc) have been unified so that external library clients can use the same libraries as BIND itself.
- New 'dnssec-coverage' tool to check DNSSEC key coverage for a zone and report if a lapse in signing coverage has been inadvertently scheduled.
- New 'dnssec-importkey' tool for importing externally generated DNSKEY records into the DNSKEY management framework.
- New 'dnssec-checkds' tool for checking the correctness of a zone's DS and DLV records.
- Signing algorithm flexibility and other improvements for the "rndc" control channel.
- "rndc zonestatus" reports information about a specified zone.
- 'named-checkzone' and 'named-compilezone' can now read journal files, allowing them to process dynamic zones.
- "named" now listens on IPv6 as well as IPv4 interfaces by default.
- New 'named-rrchecker' tool to verify the syntactic correctness of individual resource records.
Please see the file CHANGES for a detailed list of the many changes in this release.
The latest versions of BIND 9 software can always be found on our web site at http://www.isc.org/downloads/. There you will find additional information about each release, source code, and pre-compiled versions for Microsoft Windows operating systems.
Professional support is provided by DNSco. Information about paid support options is available at http://www.dns-co.com/solutions/. Free support is provided by our user community via a mailing list. Information on all public email lists is available at https://www.isc.org/community/mailing-list/.
Thank you to everyone who assisted us in making this release possible. If you would like to contribute to ISC to assist us in continuing to make quality open source software, please visit our donations page at http://www.isc.org/donate/.
© 2001-2018 Internet Systems Consortium For assistance with problems and questions for which you have not been able to find an answer in our Knowledge Base, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership. ISC relies on the financial support of the community to fund the development of its open source software products. If you would like to support future product evolution and maintenance as well having peace of mind knowing that our team of experts are poised to provide you with individual technical assistance whenever you call upon them, then please consider our Professional Subscription Support services - details can be found on our main website.